Director MX 2004 10.1r11

By: Scott Doenges - Revised: 2006-05-31 devin

Director MX 2004http://www.macromedia.com/software/director/

===============================
SetUID Special Mode Bits - Info
===============================

SetUID, or SUID special mode bits are a secruity risk, especially when the owner is the root user and should not be used unless absolutely necessary. When a user executes a file that has the SUID bit set, the program runs with the system access permissions of the user who owns that program and not with the permissions of the user who executed it.

SetUID Special Mode Bits are defined where executables run with the owner permissions.

Helpful Links:
"Writing Safe Setuid Programs" by Matt Bishop - http://nob.cs.ucdavis.edu/~bishop/secprog/index.html
Internet Security Systems - http://www.iss.net/security_center/advice/OS/UNIX/setuid/default.htm

mode: 4xxx
perm symbols: ---S------

The following files & directories have these insecure attributes:

Library/Application Support/Macromedia/1.20.006/Macromedia Licensing Service 4775

Changing permissions to 0755 or 0775 causes the application to prompt for an administrator password on launch.
Changing back to 4775 the application will launch without the prompt.

director admin login 

==============================
World Write Permissions - Info
==============================

World write permissions are a secruity risk and should not be allowed on any directories or files, especially outside the users home folder in locations Such as /Applications, /Library, /System, etc. These type of permissions would increase the risk of an unauthorized person adding files, modifying file contents, deleting data, and or compromising the system.

World-write permissions are defined where the owner, group and other (or world) has read, write and execute permissions.

mode: x777
perm symbols: -rwxrwxrwx

The following files & directories have these insecure attributes:

Applications/Director MX 2004/Configuration/Installer Log File 0777
Applications/Director MX 2004/Configuration/Libs/3D/Actions.cst 0777
Applications/Director MX 2004/Configuration/Libs/3D/Triggers.cst 0777
Applications/Director MX 2004/Configuration/Libs/Accessibility.cst 0777
Applications/Director MX 2004/Configuration/Libs/Animation/Automatic.cst 0777
Applications/Director MX 2004/Configuration/Libs/Animation/Interactive.cst 0777
Applications/Director MX 2004/Configuration/Libs/Animation/SpriteTransitions.cst 0777
Applications/Director MX 2004/Configuration/Libs/Controls.cst 0777
Applications/Director MX 2004/Configuration/Libs/Internet/Forms.cst 0777
Applications/Director MX 2004/Configuration/Libs/Internet/Streaming.cst 0777
Applications/Director MX 2004/Configuration/Libs/Media/Flash.cst 0777
Applications/Director MX 2004/Configuration/Libs/Media/QuickTime.cst 0777
Applications/Director MX 2004/Configuration/Libs/Media/RealMedia.cst 0777
Applications/Director MX 2004/Configuration/Libs/Media/Sound.cst 0777
Applications/Director MX 2004/Configuration/Libs/Navigation.cst 0777
Applications/Director MX 2004/Configuration/Libs/Paintbox.cst 0777
Applications/Director MX 2004/Configuration/Libs/Text.cst 0777
Applications/Director MX 2004/Configuration/Third Party Source Code 0777
Applications/Director MX 2004/Configuration/Third Party Source Code/JavaScript Interpreter 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/Frameworks/LicMan.framework/Versions/A/LicMan 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/MacOS/cfmsupport.dylib 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/MacOS/mv.dylib 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/Resources/English.lproj 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/Resources/English.lproj/Director Documentation 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/Resources/English.lproj/Director Documentation/Director Documentation 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/Resources/English.lproj/Director Documentation/Director Documentation idx 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/Resources/English.lproj/Director Documentation/Director Documentation.htm 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/Resources/English.lproj/Director Documentation/book 0777
Applications/General/Graphical/Director MX 2004/Director MX 2004.app/Contents/Resources/English.lproj/Director Documentation/book/images 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/Resources/MMxptLite.framework/Versions/A/MMxptLite 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/Resources/Runtime_Support/runtime1.bundle/Contents/MacOS/runtime1 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/Resources/Runtime_Support/runtime6.bundle/Contents/MacOS/runtime6 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/Resources/help.map 0777
Applications/Director MX 2004/Director MX 2004.app/Contents/SharedSupport/Macromedia Licensing Service 0777
Applications/Director MX 2004/Learning 0777
Applications/Director MX 2004/Learning/Lingo 0777
Applications/Director MX 2004/Tutorial 0777
Applications/Director MX 2004/Tutorial/3D 0777
Applications/Director MX 2004/Tutorial/Basics 0777
Applications/Director MX 2004/Tutorial/Basics/BasicsMedia 0777
Applications/Director MX 2004/Tutorial/Basics/BasicsMedia/Sounds 0777
Applications/Director MX 2004/Tutorial/Basics/Finished 0777
Applications/Director MX 2004/Tutorial/Basics/Start 0777
Library/Application Support/Macromedia 0777
Library/Preferences/Macromedia 0777
Library/Preferences/Macromedia/Licenses_120 0777